dewee-webchat 0.5.0-beta.3 → 0.5.0-beta.4

package/README.md

@@ -217,7 +217,30 @@ Only exact same-origin paths in both lists use the binding. This reads the Asset
 **bypassing Worker middleware, Cloudflare Access, and cookie-based authorization**. Every file under
 the configured prefixes must be public to any valid chat visitor; keep private files elsewhere,
 inspect the build output, and exclude sensitive files using `.assetsignore`. The URL query is not
-passed to the binding. Sibling domains still require a separate approved image domain.
+passed to the binding.
+
+For a sibling hostname in the same zone, a host can instead configure a service binding to a Worker
+that serves public images from the listed directories:
+
+```ts
+createDeweeHandler({
+  // ... other handler options
+  imageSources: ["https://images.example.com/products/"],
+  cloudflarePublicImageServices: [
+    { id: "catalog-v1", binding: env.PUBLIC_IMAGES, prefixes: ["https://images.example.com/products/"] },
+  ],
+});
+```
+
+Both lists must allow the source. Each service needs a unique ID and non-overlapping prefixes; change
+the ID whenever you repoint the binding so existing short-lived tickets cannot reach the new service.
+The service ID is visible in the image ticket, but the source URL remains encrypted. The binding
+calls the configured Worker directly, bypassing the
+source hostname's Cloudflare security rules. Every configured prefix must be public to all chat
+visitors; do not bind private services or paths. The Worker receives a GET with the approved path on
+`https://public-images.invalid`, without the original query, cookies or authorization headers. It
+must serve that path without relying on its hostname or a signed query string. A missing or invalid
+response fails closed and never falls back to a network request.
 
 Files are limited to 2 MiB and 4096
 pixels per edge, and responses are not cached. Animated GIF/PNG/WebP are refused. Raw HTML,

package/dist/{chunk-N7BJKIPT.js → chunk-4EASDTWO.js}

@@ -21,7 +21,7 @@ function isLinkErrorCode(code) {
 }
 var HEADER_GATEWAY_URL = "x-dewee-gateway-url";
 var HEADER_GATEWAY_TOKEN = "x-dewee-gateway-token";
-var VERSION = "0.5.0-beta.3";
+var VERSION = "0.5.0-beta.4";
 
 // src/actions/page-block.ts
 var ACTION_NAME_RE = /^[a-z][a-z0-9_.-]{0,63}$/;

package/dist/{chunk-Q5RDSRZG.js → chunk-OMRLBPEM.js}

@@ -11,7 +11,7 @@ import {
   parseCredentialRequest,
   parseJobAccessLaunch,
   stripPageBlock
-} from "./chunk-N7BJKIPT.js";
+} from "./chunk-4EASDTWO.js";
 
 // src/actions/directives.ts
 var DIRECTIVE_LANG = "dewee-action";

package/dist/{handler-BchS1kD4.d.ts → handler-_GEhpm1W.d.ts}

@@ -301,6 +301,14 @@ interface DeweeHandlerOptions {
         };
         prefixes: string[];
     };
+    /** Public-only service bindings for approved HTTPS image directory prefixes. Bypasses host security rules. */
+    cloudflarePublicImageServices?: Array<{
+        id: string;
+        binding: {
+            fetch(request: Request): Promise<Response>;
+        };
+        prefixes: string[];
+    }>;
     /**
      * Legacy gateway transport: let visitors bring their own gateway URL + token (sent per request, never stored).
      * Meant for playgrounds. `allowedHosts` restricts which gateways may be targeted.

package/dist/index.js

@@ -7,8 +7,8 @@ import {
   defineDeweeChat,
   mount,
   renderMarkdown
-} from "./chunk-Q5RDSRZG.js";
-import "./chunk-N7BJKIPT.js";
+} from "./chunk-OMRLBPEM.js";
+import "./chunk-4EASDTWO.js";
 export {
   ApiClient,
   ApiError,

package/dist/react.js

@@ -1,7 +1,7 @@
 import {
   defineDeweeChat
-} from "./chunk-Q5RDSRZG.js";
-import "./chunk-N7BJKIPT.js";
+} from "./chunk-OMRLBPEM.js";
+import "./chunk-4EASDTWO.js";
 
 // src/react.ts
 import { createElement, forwardRef, useEffect, useImperativeHandle, useRef } from "react";

package/dist/server-identity.d.ts

@@ -1,4 +1,4 @@
-import { D as DeweeIdentitySdk } from './handler-BchS1kD4.js';
+import { D as DeweeIdentitySdk } from './handler-_GEhpm1W.js';
 import './protocol-DjEdC6QU.js';
 
 declare const deweeIdentitySdk: DeweeIdentitySdk;

package/dist/server.d.ts

@@ -1,4 +1,4 @@
-export { A as AuthenticatedUser, C as CcpError, a as CcpOptions, b as DeweeHandler, c as DeweeHandlerOptions, d as DeweeIdentityOptions, D as DeweeIdentitySdk, e as DeweeTransport, I as IdentityPrivateJwk, f as IdentitySessionStore, g as IdentitySigner, M as MemoryRateLimits, R as RateLimitBucket, h as RateLimiter, S as StoredIdentitySession, V as VisitorClaims, i as createDeweeHandler, m as memoryIdentitySessionStore, j as memoryRateLimiter, o as optionsFromEnv, s as signVisitorToken, v as verifyVisitorToken } from './handler-BchS1kD4.js';
+export { A as AuthenticatedUser, C as CcpError, a as CcpOptions, b as DeweeHandler, c as DeweeHandlerOptions, d as DeweeIdentityOptions, D as DeweeIdentitySdk, e as DeweeTransport, I as IdentityPrivateJwk, f as IdentitySessionStore, g as IdentitySigner, M as MemoryRateLimits, R as RateLimitBucket, h as RateLimiter, S as StoredIdentitySession, V as VisitorClaims, i as createDeweeHandler, m as memoryIdentitySessionStore, j as memoryRateLimiter, o as optionsFromEnv, s as signVisitorToken, v as verifyVisitorToken } from './handler-_GEhpm1W.js';
 import { IncomingMessage, ServerResponse } from 'node:http';
 import { R as Remediation, H as HistoryMessage, A as AgentInfo, C as ChatStreamEvent, a as ActionManifestEntry, b as AdmissionErrorCode } from './protocol-DjEdC6QU.js';
 export { c as ADMISSION_ERROR_CODES, d as ActionSensitivity, e as ChatRequestBody, E as ErrorBody, I as IdentityErrorCode, L as LinkResponse, f as LinkTarget, P as PublicConfig, S as SessionResponse, i as isAdmissionErrorCode } from './protocol-DjEdC6QU.js';

package/dist/server.js

@@ -15,7 +15,7 @@ import {
   parseJobAccessLaunch,
   serializePageContext,
   stripPageBlock
-} from "./chunk-N7BJKIPT.js";
+} from "./chunk-4EASDTWO.js";
 
 // src/server/admission-errors.ts
 var MESSAGES = {
@@ -1370,7 +1370,7 @@ async function verifyImageTicket(secret, namespace, ticket) {
     return null;
   }
 }
-function allowedImageSource(raw, prefixes, endpoint, cloudflare, publicAssets = []) {
+function allowedImageSource(raw, prefixes, endpoint, cloudflare, publicAssets = [], publicServices = []) {
   try {
     if (!raw || raw.length > 4096 || /[\u0000-\u0020\u007f\\]/.test(raw)) return null;
     const match = /^https:\/\/[^/?#]+([^?#]*)/i.exec(raw);
@@ -1384,7 +1384,8 @@ function allowedImageSource(raw, prefixes, endpoint, cloudflare, publicAssets =
       const suffix = endpoint.hostname.split(".").slice(-2).join(".");
       const sameZone = source.hostname === suffix || source.hostname.endsWith(`.${suffix}`);
       const isPublicAsset = source.origin === endpoint.origin && publicAssets.some((prefix) => source.pathname.startsWith(prefix));
-      if (sameZone && !isPublicAsset) return null;
+      const isPublicService = publicServices.some((prefix) => prefix.origin === source.origin && source.pathname.startsWith(prefix.pathname));
+      if (sameZone && !isPublicAsset && !isPublicService) return null;
     }
     return prefixes.some((prefix) => prefix.origin === source.origin && source.pathname.startsWith(prefix.pathname)) ? source : null;
   } catch {
@@ -1739,6 +1740,35 @@ function createDeweeHandler(options) {
     throw new Error("[dewee-webchat] Public image asset prefixes must be explicit absolute directory paths");
   }
   const assetPrefixes = publicAssets?.prefixes ?? [];
+  if (o.cloudflarePublicImageServices !== void 0 && (!Array.isArray(o.cloudflarePublicImageServices) || o.cloudflarePublicImageServices.length > 16)) {
+    throw new Error("[dewee-webchat] Public image services must be an array");
+  }
+  const publicServices = (o.cloudflarePublicImageServices ?? []).map((service) => {
+    if (!service || typeof service.id !== "string" || !/^[A-Za-z0-9_-]{1,64}$/.test(service.id) || typeof service.binding?.fetch !== "function" || !Array.isArray(service.prefixes) || !service.prefixes.length) {
+      throw new Error("[dewee-webchat] Public image services require a binding and directory prefixes");
+    }
+    const prefixes = service.prefixes.map((raw) => {
+      let url;
+      if (typeof raw !== "string" || !/^https:\/\/[^/?#]+\/(?:[A-Za-z0-9_-]+\/)+$/.test(raw)) {
+        throw new Error("[dewee-webchat] Invalid public image service prefix");
+      }
+      try {
+        url = new URL(raw);
+      } catch {
+        throw new Error("[dewee-webchat] Invalid public image service prefix");
+      }
+      if (url.protocol !== "https:" || url.username || url.password || url.port || url.search || url.hash || !/^\/(?:[A-Za-z0-9_-]+\/)+$/.test(url.pathname)) {
+        throw new Error("[dewee-webchat] Public image service prefixes must be HTTPS origins with explicit directory paths");
+      }
+      return url;
+    });
+    return { id: service.id, binding: service.binding, prefixes };
+  });
+  const servicePrefixes = publicServices.flatMap((service) => service.prefixes);
+  if (new Set(publicServices.map((service) => service.id)).size !== publicServices.length || servicePrefixes.some((prefix, index) => servicePrefixes.slice(index + 1).some((other) => prefix.origin === other.origin && (prefix.pathname.startsWith(other.pathname) || other.pathname.startsWith(prefix.pathname))))) {
+    throw new Error("[dewee-webchat] Public image service ids and directory prefixes must not overlap");
+  }
+  const serviceFor = (source) => publicServices.find((service) => service.prefixes.some((prefix) => prefix.origin === source.origin && source.pathname.startsWith(prefix.pathname)));
   let activeImages = 0;
   const imageNamespace = `${o.ccp?.chatUrl ?? o.gatewayUrl ?? ""}
 ${o.ccp?.integrationId ?? o.tenantId ?? ""}`;
@@ -2661,32 +2691,43 @@ ${o.ccp?.integrationId ?? o.tenantId ?? ""}`;
         }
         const raw = parsed?.url;
         const worker = globalThis.navigator?.userAgent === "Cloudflare-Workers";
-        const source = typeof raw === "string" ? allowedImageSource(raw, imageSources, new URL(req.url), worker, worker ? assetPrefixes : []) : null;
+        const source = typeof raw === "string" ? allowedImageSource(raw, imageSources, new URL(req.url), worker, worker ? assetPrefixes : [], worker ? servicePrefixes : []) : null;
         if (!source) return fail(req, 403, "Image not allowed", "forbidden_image");
         const endpoint = new URL(req.url);
         const asset = publicAssets && source.origin === endpoint.origin && assetPrefixes.some((prefix) => source.pathname.startsWith(prefix));
+        const service = asset ? void 0 : serviceFor(source);
         const namespace = asset ? `${imageNamespace}
-assets:${endpoint.origin}` : imageNamespace;
-        return json(req, { ticket: await issueImageTicket(secret, namespace, claims.v, source.href) });
+assets:${endpoint.origin}` : service ? `${imageNamespace}
+service:${endpoint.origin}:${service.id}` : imageNamespace;
+        const ticket = await issueImageTicket(secret, namespace, claims.v, source.href);
+        return json(req, { ticket: service ? `s.${service.id}.${ticket}` : ticket });
       }
       if (req.method === "GET" && action === "image" && imageSources.length) {
         const ticket = new URL(req.url).searchParams.get("ticket") ?? "";
         const endpoint = new URL(req.url);
-        const assetClaims = await verifyImageTicket(secret, `${imageNamespace}
+        const tagged = /^s\.([A-Za-z0-9_-]{1,64})\.([A-Za-z0-9_-]{1,8192})$/.exec(ticket);
+        const serviceId = tagged?.[1];
+        if (serviceId && !publicServices.some((service2) => service2.id === serviceId)) return fail(req, 401, "Image ticket expired", "unauthorized");
+        const serviceClaims = tagged ? await verifyImageTicket(secret, `${imageNamespace}
+service:${endpoint.origin}:${serviceId}`, tagged[2]) : null;
+        const assetClaims = tagged ? null : await verifyImageTicket(secret, `${imageNamespace}
 assets:${endpoint.origin}`, ticket);
-        const claims = assetClaims ?? await verifyImageTicket(secret, imageNamespace, ticket);
+        const claims = tagged ? serviceClaims : assetClaims ?? await verifyImageTicket(secret, imageNamespace, ticket);
         if (!claims) return fail(req, 401, "Image ticket expired", "unauthorized");
         const worker = globalThis.navigator?.userAgent === "Cloudflare-Workers";
-        const source = allowedImageSource(claims.source, imageSources, endpoint, worker, worker ? assetPrefixes : []);
+        const source = allowedImageSource(claims.source, imageSources, endpoint, worker, worker ? assetPrefixes : [], worker ? servicePrefixes : []);
         if (!source) return fail(req, 403, "Image not allowed", "forbidden_image");
         const asset = publicAssets && source.origin === endpoint.origin && assetPrefixes.some((prefix) => source.pathname.startsWith(prefix));
         if (Boolean(asset) !== Boolean(assetClaims)) return fail(req, 403, "Image not allowed", "forbidden_image");
+        const service = asset ? void 0 : serviceFor(source);
+        if (service?.id !== serviceId) return fail(req, 403, "Image not allowed", "forbidden_image");
         if (limiter && !await limiter(`image:${claims.visitor}`, "preauth")) return fail(req, 429, "Too many requests, try again later", "rate_limited");
         if (activeImages >= 8) return fail(req, 429, "Too many requests, try again later", "rate_limited");
         activeImages++;
         try {
           const assetFetch = (input, init) => publicAssets.binding.fetch(new Request(new URL(new URL(String(input)).pathname, "https://assets.invalid"), init));
-          const result = await fetchRasterImage(source.href, asset ? assetFetch : worker ? globalThis.fetch : publicImageFetchNode, worker ? "manual" : "error");
+          const serviceFetch = (input, init) => service.binding.fetch(new Request(new URL(new URL(String(input)).pathname, "https://public-images.invalid"), init));
+          const result = await fetchRasterImage(source.href, asset ? assetFetch : service ? serviceFetch : worker ? globalThis.fetch : publicImageFetchNode, worker || service ? "manual" : "error");
           return result ?? fail(req, 502, "Image unavailable", "image_unavailable");
         } finally {
           activeImages--;

package/dist/vue.js

@@ -1,7 +1,7 @@
 import {
   defineDeweeChat
-} from "./chunk-Q5RDSRZG.js";
-import "./chunk-N7BJKIPT.js";
+} from "./chunk-OMRLBPEM.js";
+import "./chunk-4EASDTWO.js";
 
 // src/vue.ts
 import { defineComponent, h, onMounted, ref, watch } from "vue";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dewee-webchat",
-  "version": "0.5.0-beta.3",
+  "version": "0.5.0-beta.4",
   "description": "Embeddable chat widget for Dewee AI agents — web component, React/Vue/Astro wrappers and a secure backend handler (Workers, Next.js, Node, Bun, Deno).",
   "license": "MIT",
   "type": "module",